asa 5506-x hidden image

[ublaq]

Hello

I am new to this forum and cisco firewalls

I  bought a cisco asa5506-x, the default configuration seems to be running fine.

However, I’m puzzled by the different image versions showing in startup-config, “ASA Version 9.8(2)” and in running-config “ASA Version 9.16(3) 23”.

There is no ASA 9.8(2) image in disk0:/

There’s an asa9-16-3-23-lfbff-k8.SPA image in disk0:/

Both startup-config and running-config contain the line:

boot system disk0:/asa9-16-3-23-lfbff-k8.SPA
 

I suspect there must be a hidden ASA 9.8(2) image somewhere for startup-config to run with that image initially.

Could someone please tell me if that’s the case.

[MHM Cisco World]

1. Show version — This shows the current image with which the ASA is booted.
2. Show bootvar — This shows the priority of the image to be used after reload.

show disk0:  <<- show all image in ASA
OR
show flash <<- show all image in ASA

[ublaq]

Thank you for your very helpful reply.
Disk0:/ contains two asa images:

1. asa982-lfbff-k8.SPA – the first image in the folder
2. asa9-16-3-23-lfbff-k8.SPA

startup-config contains the line: ASA Version 9.8(2)

running-config contains the line: ASA Version 9.16.(3)23
both configs file has the same line:
boot system disk0:/asa9-16-3-23-lfbff-k8.SPA
I’m curious as to why the device startup with ASA Version 9.8(2), and the running config is ASA Version 9.16.(3)23.

I’m also troubled by the result of show version, in particular the following two lines:
WARNING: Platform FPGA version is older than minimum recommended image.
WARNING: Platform ROMMON version is older than minimum recommended image.

FPGA UPGRADE Version : 2.4
FPGA GOLDEN Version : unavailable
ROMMON Version : 1.1.8

Thank you in anticipation of your help

[MHM Cisco World]

ASA(config)# sh boot <<- can share this

[ublaq]

ciscoasa# sh boot

BOOT variable = disk0:/asa9-16-3-23-lfbff-k8.SPA
Current BOOT variable = disk0:/asa9-16-3-23-lfbff-k8.SPA
CONFIG_FILE variable =
Current CONFIG_FILE variable =

[MHM Cisco World · Accepted solution]

Solved: Change default boot file on ASA - Cisco Community <<- check this link. 

[Georg Pauwen]

Hello,

as far as I recall, the 'startup-config' is stored in a hidden partition (in flash or disk memory), and you can only view it by issuing the 'show startup-config' command. My guess is that 9.8(2) was loaded at some point and written to the startup config (using the 'wr mem' command).

What if you do a 'wr mem' now ? And then issue the 'show startup-config' command ? It should, in theory, match your running config...